Place Your Ad Here

XenForo SQL Injection Warnings

B

Bonsai Coder

Guest
Some of my users report that when posting a long response (or taking a long time to type a response) they will sometimes get locked out of the site for an hour... after which they are allowed to return and everything runs as normal.

Looking into my server, I have ModSecurity enabled, and see a lot of "Rule 300016: Generic SQL injection protection" hits.

Here is an example:
Request: POST /threads/satsuki-repot.45070/draft

Action Description: Access denied with...
Click to expand...
Click to expand...

Read more

Continue reading...
 
You must log in or register to reply here.

Similar threads

E
Ques/Help SQL Query to remove hard delete option from all users/usergroups?
Replies
0
Views
48
XenForo General Discussions
ekool
E
M
XenForo Error 1064 importing sql database
Replies
0
Views
70
XenForo Development & Modifications
Miri
M
X
Solved XF\Db\Schema\Column::values() can generate invalid SQL
Replies
0
Views
71
XenForo General Discussions
Xon
X
B
Ques/Help Restore SQL data
Replies
0
Views
96
XenForo General Discussions
Binkaddas
B
M
Ques/Help Getting the actual attachment url through a sql query?
Replies
0
Views
103
XenForo General Discussions
Mave
M
Top Bottom
Back